Privacy Policy

1. Who We Are

The data controller responsible for processing Your Personal Data in connection with the Service is:

AI Peeps Lab di Biscione Valerio
Via Fura 108
25125 Brescia (BS)
Italy
Italian VAT number / Partita IVA: 06062320657

The Service is operated online under the brand name AI Peeps and is accessible at https://aipeeps.com.

For any questions about this Privacy Policy or the processing of Your Personal Data, You can contact Us at:

• Email: admin@aipeeps.com
• Postal address: AI Peeps Lab di Biscione Valerio, Via Fura 108, 25125 Brescia (BS), Italy.

We have not appointed a Data Protection Officer. Privacy-related requests should be sent to the contact details above.

2. Interpretation and Definitions

Interpretation

Words with capitalized initial letters have meanings defined in this section. These definitions apply whether the terms appear in singular or plural.

Definitions

• Account means a unique account created for You to access and use the Service.
• Company (referred to as "the Company", "We", "Us", or "Our") means AI Peeps Lab di Biscione Valerio, operating online under the brand "AI Peeps".
• Service means the website and related online services operated by the Company, including AI character chat, AI image generation, AI video generation, character creation, media editing, digital credits, membership features, and related tools.
• Website refers to AI Peeps, accessible at https://aipeeps.com.
• Personal Data means any information relating to an identified or identifiable natural person.
• Usage Data means data collected automatically when You use the Service, such as IP address, browser type, device information, pages visited, timestamps, logs, and approximate location derived from IP address.
• Chat Data means messages, prompts, replies, memory summaries, and related conversation data generated when You interact with AI characters or other chat features.
• Uploaded Media means images, videos, audio, or other files that You upload to the Service, including media uploaded for chat immersion, character creation, image editing, video generation, or other AI workflows.
• Generation Inputs means prompts, Uploaded Media, settings, references, and other materials submitted by You to generate or edit text, images, videos, or other AI outputs.
• AI-Generated Content means text, images, videos, audio, or other synthetic media generated by the Service based on Your inputs, Uploaded Media, settings, or interactions.
• Service Providers means third-party companies or individuals that process Personal Data to help Us provide, secure, operate, analyse, improve, or monetise the Service. This may include hosting providers, storage providers, payment processors, marketplace partners, analytics providers, AI infrastructure providers, and email providers.
• Cookies are small files placed on Your device that store information for authentication, security, functionality, preferences, analytics, or similar purposes.
• You means the individual using the Service, or the company or other legal entity on whose behalf such individual is using the Service.

3. Age Restriction and Nature of the Service

The Service is intended exclusively for adults aged 18 years or older. By using the Service, You represent that You are at least 18 years old and have the legal capacity to use the Service.

The Service may include fictional AI characters, AI chat, AI-generated images, AI-generated videos, media editing, roleplay, and adult-oriented digital entertainment. Minors are not permitted to access or use the Service.

We do not knowingly collect Personal Data from individuals under 18. If We become aware that We have collected or processed Personal Data relating to a minor, We will take reasonable steps to delete such data and, where appropriate, close or restrict the associated Account, unless retention is necessary for legal, safety, fraud-prevention, or abuse-prevention reasons.

We may use technical measures, account controls, moderation tools, user reports, logs, and manual review to help detect and prevent misuse of the Service, including misuse involving minors, illegal content, non-consensual content, fraud, or attempts to bypass Our policies.

4. Categories of Personal Data We Process

4.1 Account Data

When You create or use an Account, We may process:

• Email address
• Password credentials, stored in hashed form
• Username, display name, or profile settings, if provided
• Account status, subscription status, credit balance, and account history
• Internal user identifiers and authentication records

4.2 Billing, Payment, and Transaction Data

When You purchase credits, subscriptions, membership access, prepaid codes, or other digital products, We may process data necessary to manage the transaction, provide the purchased item, prevent fraud, handle support, and comply with tax and accounting obligations. This may include:

• Transaction identifiers
• Purchased product, amount, currency, date, and payment status
• Billing name, billing address, country, VAT number, or tax ID, where applicable
• Subscription status, renewal status, cancellation status, and entitlement history
• Refund, dispute, chargeback, fraud, and payment-support records
• Marketplace order identifiers and redemption-code records, where applicable

Full payment card details are processed by payment processors or marketplace partners and are not stored in full by Us.

4.3 Chat Data

We process Chat Data to provide AI chat functionality, maintain context, personalise interactions, operate memory features, investigate abuse, and improve the reliability of the Service.

• Recent conversation content may be stored in full to preserve conversation continuity.
• Older conversation content may be stored as summaries to reduce data volume while preserving useful context.
• Chat Data is not routinely reviewed by humans. Human review may occur where necessary for support, abuse investigation, safety, security, debugging, legal compliance, or enforcement of Our Terms.

4.4 Uploaded Media

Some features allow You to upload images, videos, or other media. Uploaded Media may be used to provide chat immersion, character creation, image editing, image generation, video generation, reference-based generation, or other AI workflows.

Uploaded Media may contain Personal Data, including biometric-like information or images of identifiable persons. You are responsible for ensuring that You have the necessary rights, permissions, and lawful basis to upload and use any media You submit to the Service.

We may process Uploaded Media using automated tools, technical filters, logging, and limited manual review where necessary to provide the Service, detect illegal or prohibited content, investigate abuse, respond to reports, protect users, comply with legal obligations, or enforce Our Terms.

4.5 Generation Inputs and AI-Generated Content

We process Generation Inputs to produce AI-Generated Content requested by You. This may include prompts, uploaded reference media, selected characters, styles, settings, negative prompts, generation parameters, and technical metadata.

AI-Generated Content may be stored in Your Account so that You can view, download, reuse, or manage it. We may remove, restrict, or retain certain content where necessary for legal compliance, safety, abuse prevention, dispute handling, or enforcement of Our Terms.

We may use AI-Generated Content that does not contain Personal Data and does not identify real persons for internal testing, service improvement, examples, galleries, or promotional purposes. We do not use content containing or linked to Your Personal Data for marketing without a lawful basis and, where required, Your consent.

4.6 Moderation, Safety, and Abuse-Prevention Data

We may process account data, Usage Data, prompts, Uploaded Media, AI-Generated Content, payment records, reports, and technical logs to detect, prevent, investigate, and respond to illegal, unsafe, abusive, fraudulent, or prohibited use of the Service.

This may include processing related to suspected content involving minors, non-consensual intimate content, misuse of images of real persons, intellectual property complaints, fraud, spam, security abuse, attempts to bypass moderation, or other violations of Our Terms.

4.7 Usage Data and Technical Logs

We automatically collect Usage Data and technical logs when You use the Service. This may include:

• IP address and approximate location derived from IP address
• Browser type and version
• Device type, operating system, and device identifiers
• Pages viewed, buttons clicked, timestamps, and session identifiers
• Request logs, error logs, generation logs, and infrastructure logs
• Security, anti-abuse, fraud-prevention, and rate-limiting signals

4.8 Cookies and Similar Technologies

We use Cookies and similar technologies to operate the Service, maintain sessions, remember preferences, protect accounts, analyse usage, and improve the Service. More information is provided in the "Cookies and Analytics" section below.

4.9 Communications and Support Data

If You contact Us by email, contact form, social media, marketplace message, or other support channel, We process the content of Your message and related contact details to respond, provide support, investigate issues, and keep records of the communication.

5. Purposes and Legal Bases for Processing

As an EU-based controller, We process Personal Data only where We have a lawful basis under Article 6 GDPR. Depending on the context, We may rely on:

• Performance of a contract with You
• Compliance with legal obligations
• Our legitimate interests
• Your consent

6. AI Providers and Model Training

The Service relies on AI models and AI infrastructure providers to generate text, images, videos, and other outputs. To provide these features, We may send prompts, settings, Uploaded Media, Generation Inputs, and related technical data to AI infrastructure providers.

We do not use Chat Data, Uploaded Media, Generation Inputs, or AI-Generated Content containing Personal Data to train Our own AI models.

Where possible, We configure third-party AI providers so that user data is not used to train their models. However, some providers may process data as independent controllers or under their own terms for specific services. We encourage You to avoid submitting sensitive Personal Data unless it is necessary for Your use of the Service.

7. Cookies and Analytics

7.1 Types of Cookies

We may use the following categories of Cookies and similar technologies:

• Essential Cookies – Required for authentication, security, account access, fraud prevention, and core functionality. These cannot be disabled through Our cookie tools.
• Preference Cookies – Used to remember settings such as language, display preferences, or interface choices.
• Analytics Cookies – Used to understand how the Service is used, diagnose issues, and improve performance. Where required, these are used only with Your consent.
• Marketing or Attribution Cookies – Used, where applicable and where legally permitted, to understand traffic sources, affiliate referrals, campaigns, or conversion performance.

You can configure Your browser to refuse certain Cookies. If You block essential Cookies, parts of the Service may not work properly.

7.2 Analytics

We may use analytics tools, such as Google Analytics or similar services, to collect aggregated or pseudonymous information about how users interact with the Service. Where required by law, analytics tools are used only after You provide consent.

You may withdraw consent for non-essential Cookies through the cookie settings available on the Website, where applicable.

8. Recipients and Service Providers

We share Personal Data only where necessary to operate, provide, secure, improve, monetise, or legally protect the Service. Service Providers may act as processors on Our behalf or, in some cases, as independent controllers for specific activities such as payment processing, marketplace transactions, fraud prevention, or legal compliance.

8.1 Main Categories of Recipients

• Hosting and infrastructure providers, including application hosting and GPU compute providers used to operate the Service and run AI workloads.
• Storage and content delivery providers, including providers used to store, cache, and deliver images, videos, files, and other media.
• Database and authentication providers, including providers used to store account data, login data, user settings, subscriptions, credits, and related records.
• Payment processors and marketplace partners, including providers used to process purchases, credits, subscriptions, prepaid codes, refunds, fraud checks, disputes, chargebacks, tax/accounting records, and payment-related support. These may include PayPal, NOWPayments, G2A.COM, Stripe, Finby, and other payment or marketplace partners used from time to time.
• Analytics, monitoring, and logging providers, including tools used to understand usage, diagnose errors, monitor infrastructure, detect abuse, and improve the Service.
• Email and communications providers, used for contact forms, support emails, transactional emails, account notices, and service updates.
• AI model and AI infrastructure providers, used to generate text, images, videos, audio, or other outputs based on Your inputs.
• Professional advisers and authorities, where necessary for accounting, tax, legal advice, dispute handling, law enforcement requests, regulatory compliance, or protection of rights.

8.2 International Transfers

Some Service Providers may be located outside the European Economic Area ("EEA"), including in countries that may not provide the same level of data protection as the EU.

Where Personal Data is transferred outside the EEA, We use appropriate safeguards where required, such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, contractual commitments, or other mechanisms recognised by applicable data protection law.

You may contact Us to request more information about the safeguards used for international transfers.

9. Data Retention

We keep Personal Data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: retained for as long as Your Account exists, and afterwards where necessary for legal, accounting, fraud-prevention, dispute, or security purposes.
• Billing, payment, and invoice data: retained for the period required by tax and accounting law, which may be up to 10 years under Italian law.
• Chat Data: retained for as long as necessary to provide conversation continuity, memory, account functionality, support, and abuse prevention. Older conversation content may be stored in summarised form.
• Uploaded Media used as temporary Generation Inputs: generally retained only for the time necessary to process the requested generation or editing task, unless retention is needed for technical, safety, abuse, dispute, or legal reasons.
• AI-Generated Content: generally retained in Your Account until You delete it, delete Your Account, or until it is removed under Our Terms, unless a shorter automatic retention period applies to specific content types.
• Technical logs and Usage Data: typically retained for a limited period needed for security, diagnostics, analytics, and abuse prevention. Longer retention may apply where necessary to investigate fraud, security incidents, illegal content, or policy violations.
• Support communications: retained for as long as necessary to respond to the request, document the issue, and protect Our legal interests.
• Moderation, abuse, and enforcement records: retained for as long as necessary to protect the Service, prevent repeated abuse, comply with legal obligations, handle disputes, and enforce Our Terms.

When Personal Data is no longer needed, We delete it, anonymise it, or retain it only where legally permitted or required.

10. Data Security

We implement appropriate technical and organisational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or unauthorised access.

These measures may include restricted access to production systems, authentication controls, encryption in transit, infrastructure monitoring, backups, logging, access controls, and regular maintenance.

No method of transmission over the Internet or method of electronic storage is completely secure. While We work to protect Your Personal Data, We cannot guarantee absolute security.

10.1 Payment Data

Payment card data is processed securely by our third-party, PCI-DSS compliant payment provider. We do not collect, process, or store full payment card details on our own servers. All card transactions are encrypted and handled directly by the payment provider in accordance with applicable card scheme security standards.

11. Your GDPR Rights

If You are located in the EEA, the United Kingdom, or another jurisdiction with similar rights, You may have the following rights, subject to the conditions and limitations set out in applicable law:

• Right of access: to obtain confirmation of whether We process Your Personal Data and to receive a copy of such data.
• Right to rectification: to request correction of inaccurate or incomplete Personal Data.
• Right to erasure: to request deletion of Your Personal Data in certain circumstances.
• Right to restriction of processing: to request that We limit processing of Your Personal Data in certain circumstances.
• Right to data portability: to receive Personal Data You provided to Us in a structured, commonly used, machine-readable format, where technically feasible and legally required.
• Right to object: to object to processing based on legitimate interests, including profiling based on legitimate interests.
• Right to withdraw consent: where processing is based on consent, You may withdraw consent at any time.
• Right to lodge a complaint: to lodge a complaint with a data protection supervisory authority.

You can exercise Your rights by contacting Us at admin@aipeeps.com. We may need to verify Your identity before responding to Your request.

We aim to respond to privacy requests as quickly as possible, usually within 1 business day and always within the time limits required by law. Where You request deletion of Your Account or Personal Data, We generally complete the deletion within 7 days, unless We need to retain limited information for legal, tax, accounting, payment dispute, fraud-prevention, safety, or security reasons.

In Italy, the competent supervisory authority is the Garante per la protezione dei dati personali. You may also contact the supervisory authority in the EU Member State of Your habitual residence, place of work, or place of the alleged infringement.

12. Account Deletion and Content Deletion

You may delete Your Account yourself from Your user panel in the app or on the website, or request deletion of Your Account or certain Personal Data by contacting Us at admin@aipeeps.com. Our Delete Your Account page sets out the steps and lists exactly what is deleted and what is retained.

When an Account is deleted We store a salted, irreversible hash of the email address it was registered with, together with the date the Account was originally created. The hash cannot be reversed into an email address, is never used to contact or profile You, and exists solely to prevent the same address from repeatedly collecting new-signup bonuses by deleting and recreating an Account.

Deletion may not be immediate for all data. We may retain certain information where necessary for tax, accounting, payment disputes, fraud prevention, abuse prevention, security, legal claims, or compliance with legal obligations.

If content has been removed or retained because it is associated with suspected abuse, illegal content, fraud, disputes, or Terms violations, We may retain limited records as necessary to protect the Service and comply with law.

13. Automated Decision-Making

The Service uses algorithms and AI models to generate content, provide AI chat, personalise user experience, assist with moderation, detect abuse, and manage technical infrastructure.

We do not carry out automated decision-making that produces legal effects concerning You or similarly significantly affects You within the meaning of Article 22 GDPR, such as automated credit decisions without human involvement.

Some moderation, fraud-prevention, and security systems may automatically flag, restrict, or prioritise content or accounts for review. Where appropriate, significant enforcement decisions may be reviewed manually.

14. Third-Party Links and Marketplaces

The Service may contain links to third-party websites, marketplaces, payment providers, social platforms, or services that are not operated by Us. These third parties have their own privacy policies and data processing practices.

Where You purchase AI Peeps products through a third-party marketplace or payment provider, that third party may process Your Personal Data independently according to its own privacy policy and terms. We are not responsible for the privacy practices of third-party websites or services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, Our data processing practices, applicable law, payment providers, marketplace partners, safety requirements, or technical infrastructure.

When We make changes, We will update the "Last updated" date at the top of this page. Where required by law, We will notify You through the Service, by email, or by other appropriate means.

Your continued use of the Service after the updated Privacy Policy becomes effective means that You acknowledge the updated Privacy Policy.

16. Contact Us

If You have any questions about this Privacy Policy, Our data practices, or if You wish to exercise Your data protection rights, You can contact Us at:

• Email: admin@aipeeps.com
• Postal address: AI Peeps Lab di Biscione Valerio, Via Fura 108, Brescia, 25125, Italy.